Lvyecms Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Lvyecms Project records in CISA KEV

No Lvyecms Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Lvyecms 2 records MEDIUM

Records

2 records in Lvyecms · all components

TI-2017-12444 CVE-2017-16903 · GHSA-x23c-qwc7-6vg8

LvyeCMS through 3.1 allows remote attackers to upload and execute arbitrary PHP code via…

MEDIUM 46

LvyeCMS through 3.1 allows remote attackers to upload and execute arbitrary PHP code via directory traversal sequences in the dir parameter, in conjunction with PHP code in the content parameter, within a template Style…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02049 Published 2017-11-20 No fix listed CWE-22

TI-2017-12445 CVE-2017-16904 · GHSA-r2v3-f78q-m97c

The Public tologin feature in admin.php in LvyeCMS through 3.1 allows XSS via a crafted…

LOW 28

The Public tologin feature in admin.php in LvyeCMS through 3.1 allows XSS via a crafted username that is mishandled during later log viewing by an administrator.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00652 Published 2017-11-20 No fix listed CWE-79

Open these records in search →

Critical	1
High	0
Medium	1
Low	0
No CVSS	0